c90a757959e3c73de888ecd39941813a10e41c6b8246bb9f4ab54544d6070bcfN

Sharing

Copy URL Twitter E-mail

General

Target

c90a757959e3c73de888ecd39941813a10e41c6b8246bb9f4ab54544d6070bcfN
Size

510KB
MD5

fad18f1dd3d4e6bc116687533ba01150
SHA1

568410082758d20a999198d2efc954757cc86e7f
SHA256

c90a757959e3c73de888ecd39941813a10e41c6b8246bb9f4ab54544d6070bcf
SHA512

6ce191267446f2267245870a5a01e8a04bd286dcd9c585de004588aab54a95dc8c67d62abb38aa1d67872d37fc5cb662b82430fb67f8ab3358a054e18d8a552d
SSDEEP

6144:umDI1LnqsuP1yMpSKHaqyQXSEpSC5RdfdwzOtA+4iynpG11ifKwW:+5qJoMwqLZhKOR4K1ifKw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c90a757959e3c73de888ecd39941813a10e41c6b8246bb9f4ab54544d6070bcfN

Files

c90a757959e3c73de888ecd39941813a10e41c6b8246bb9f4ab54544d6070bcfN
.exe windows:4 windows x86 arch:x86

86c72ef66129e6c1f77e9e0e47651103

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA

kernel32

GetLocalTime
GetStartupInfoA
GetCommandLineA
RtlUnwind
HeapAlloc
HeapFree
RaiseException
ExitProcess
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
HeapSize
HeapReAlloc
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSection
LocalFree
LocalAlloc
lstrlenA
lstrcpynA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
SetHandleCount
GetWindowsDirectoryA
LoadResource
GetFileType
lstrcatA
FindResourceA
GetProcessVersion
WaitForSingleObject
SetEvent
GetCurrentThreadId
GetVersion
CloseHandle
CreateEventA
LocalReAlloc
GetLastError
SetLastError
EnterCriticalSection
TlsSetValue
TlsGetValue
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalHandle
LeaveCriticalSection
DeleteCriticalSection
GlobalUnlock
GlobalFree
GetStdHandle
TlsAlloc
HeapCreate
GetEnvironmentStringsW
LockResource

user32

GetTopWindow
GetClientRect
AdjustWindowRectEx
GetFocus
PeekMessageA
GetSysColor
MapWindowPoints
SystemParametersInfoA
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
PtInRect
ClientToScreen
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
GetMenu
GetKeyState
DestroyWindow
GetCapture
SetPropA
GetLastActivePopup
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
GetMessagePos
GetWindow
RegisterWindowMessageA
GetParent
SetFocus
IsWindowEnabled
SetWindowLongA
GetDlgCtrlID
GetWindowTextA
GetWindowLongA
GetDlgItem
LoadStringA
EnableWindow
SendMessageA
UnhookWindowsHookEx
LoadMenuA
GetSubMenu
TrackPopupMenu
DestroyIcon
SendDlgItemMessageA
WinHelpA
DefWindowProcA
SetTimer
KillTimer
PostQuitMessage
DialogBoxParamA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
MoveWindow
LoadImageA
GetDC
FillRect
ReleaseDC
SetWindowPos
PostMessageA
FindWindowA
GetSystemMetrics
GetWindowRect
WindowFromPoint
GetForegroundWindow
GetClassNameA
GetScrollInfo
CallNextHookEx
SetWindowsHookExA
SetForegroundWindow
GetCursorPos
GetAsyncKeyState
OffsetRect
SetDlgItemTextA
EndDialog
GetDlgItemTextA
SetWindowTextA

gdi32

DeleteObject
DeleteDC
SelectObject
SelectPalette
GetStockObject
CreateBitmap
BitBlt
SetBkColor
StretchBlt
CreateCompatibleBitmap
CreatePalette
GetSystemPaletteEntries
CreateCompatibleDC
SetTextColor
CreateSolidBrush
GetObjectA
GetDeviceCaps
CreatePen
RestoreDC
SaveDC
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
RealizePalette
ScaleViewportExtEx
SetMapMode

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

Shell_NotifyIconA

comctl32

ord17

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

naewtjd
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

86c72ef66129e6c1f77e9e0e47651103

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

winspool.drv

shell32

comctl32

Sections

.text Size: 87KB - Virtual size: 87KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 21KB

.idata Size: 6KB - Virtual size: 5KB

.rsrc Size: 280KB - Virtual size: 279KB

.reloc Size: 38KB - Virtual size: 38KB

naewtjd Size: 80KB - Virtual size: 80KB

.text
Size: 87KB - Virtual size: 87KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 21KB

.idata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 280KB - Virtual size: 279KB

.reloc
Size: 38KB - Virtual size: 38KB

naewtjd
Size: 80KB - Virtual size: 80KB